Building and Attacking an Active Directory lab with PowerShell - Easy to follow lab guide includes kerberoasting
http://ift.tt/2h9Brjd
Submitted November 06, 2017 at 09:19PM by myexploit2600
via reddit http://ift.tt/2zlqrYm
http://ift.tt/2h9Brjd
Submitted November 06, 2017 at 09:19PM by myexploit2600
via reddit http://ift.tt/2zlqrYm
1337red
Building and Attacking an Active Directory lab with PowerShell
Let me open this with a few questions Do you have your own penetration testing lab? Have you installed Windows Server 2016 before? Do you have Active Directory at home? What version of PowerShell a…
Buri Nazar Se Bachne Ki Dua | Buri Nazar Ko Khatam Karna Ka Amal
http://ift.tt/2lXTvSE
Submitted November 06, 2017 at 11:48PM by Ahmadali0786
via reddit http://ift.tt/2yAnV3h
http://ift.tt/2lXTvSE
Submitted November 06, 2017 at 11:48PM by Ahmadali0786
via reddit http://ift.tt/2yAnV3h
Love Problem Solution Astrologer
Buri Nazar Se Bachne Ki Dua | Buri Nazar Ko Khatam Karna Ka Amal
Buri Nazar Se Bachne Ki Dua, " Aaj ke samye me har ek aadmi dusre ki kamyabi se jalta hai. Agar kisi insan ko saflta milti hai to uska koi mitr..
GDPR raising cybersecurity awareness among EU business leaders
http://ift.tt/2yqxi5H
Submitted November 06, 2017 at 11:11PM by yourbasicgeek
via reddit http://ift.tt/2zlzJpb
http://ift.tt/2yqxi5H
Submitted November 06, 2017 at 11:11PM by yourbasicgeek
via reddit http://ift.tt/2zlzJpb
reddit
GDPR raising cybersecurity awareness among EU... • r/security
4 points and 0 comments so far on reddit
Technical Details on OceanLotus' Attacks Targeting ASEAN, Asian Nations, and Human Rights Groups
http://ift.tt/2lX9G2F
Submitted November 07, 2017 at 12:14AM by transt
via reddit http://ift.tt/2yACUKu
http://ift.tt/2lX9G2F
Submitted November 07, 2017 at 12:14AM by transt
via reddit http://ift.tt/2yACUKu
Bypassing Modern Process Hollowing Detection (via Hotswapping Maps)
http://ift.tt/2zm3e88
Submitted November 07, 2017 at 12:47AM by MalwareSeattle
via reddit http://ift.tt/2AduOUk
http://ift.tt/2zm3e88
Submitted November 07, 2017 at 12:47AM by MalwareSeattle
via reddit http://ift.tt/2AduOUk
reddit
Bypassing Modern Process Hollowing Detection (via... • r/netsec
3 points and 0 comments so far on reddit
Please Stop Naming Vulnerabilities: Exploring 6 Previously Unknown Remote Kernel Bugs Affecting Android Phones
http://ift.tt/2yAeuAP
Submitted November 07, 2017 at 01:08AM by overflowingInt
via reddit http://ift.tt/2zmhNe2
http://ift.tt/2yAeuAP
Submitted November 07, 2017 at 01:08AM by overflowingInt
via reddit http://ift.tt/2zmhNe2
Pleasestopnamingvulnerabilities
Please Stop Naming Vulnerabilities: Exploring 6 Previously Unknown Remote Kernel Bugs Affecting Android Phones
PreludeIn today’s world everyone knows that a security vulnerability isn’t really a security vulnerability unless it has been given a name other than a CVE, ...
Estonia freezes resident ID cards due to security flaw
http://ift.tt/2zdRkjb
Submitted November 07, 2017 at 01:26AM by volci
via reddit http://ift.tt/2zj8TyA
http://ift.tt/2zdRkjb
Submitted November 07, 2017 at 01:26AM by volci
via reddit http://ift.tt/2zj8TyA
Engadget
Estonia freezes resident ID cards due to security flaw
Estonia's mandatory national IDs have a serious flaw affecting over half the country's population.
US-CERT Warns of Crypto Bugs in IEEE Standard
http://ift.tt/2zmlcaR
Submitted November 07, 2017 at 01:18AM by volci
via reddit http://ift.tt/2hfMyuF
http://ift.tt/2zmlcaR
Submitted November 07, 2017 at 01:18AM by volci
via reddit http://ift.tt/2hfMyuF
Threatpost | The first stop for security news
US-CERT Warns of Crypto Bugs in IEEE Standard
Weak cryptography in the IEEE P1735 electronics standard allow attackers to recover valuable intellectual property in plaintext from SoCs and integrated circuits.
Taking over instagram accounts
http://ift.tt/2lQnhsA
Submitted November 07, 2017 at 02:02AM by luc1o
via reddit http://ift.tt/2znapgH
http://ift.tt/2lQnhsA
Submitted November 07, 2017 at 02:02AM by luc1o
via reddit http://ift.tt/2znapgH
reddit
Taking over instagram accounts • r/netsec
1 points and 0 comments so far on reddit
Concerns about relative security of TOTP
I was reading the RFC for TOTP/HOTP and it seems the security relies entirely on SHA-1 remaining cryptographically secure. With shattered and SHA-1 being deprecated since 2011, should the RFC be updated/replaced? I understand there is no immediate threat, but all the same, shouldn't an alternative be implemented?
Submitted November 07, 2017 at 02:21AM by IronManMark20
via reddit http://ift.tt/2m0oo9c
I was reading the RFC for TOTP/HOTP and it seems the security relies entirely on SHA-1 remaining cryptographically secure. With shattered and SHA-1 being deprecated since 2011, should the RFC be updated/replaced? I understand there is no immediate threat, but all the same, shouldn't an alternative be implemented?
Submitted November 07, 2017 at 02:21AM by IronManMark20
via reddit http://ift.tt/2m0oo9c
reddit
Concerns about relative security of TOTP • r/security
I was reading the RFC for TOTP/HOTP and it seems the security relies entirely on SHA-1 remaining cryptographically secure. With shattered and...
PoC||GTFO 0x16 [pdf]
http://ift.tt/2y69D61
Submitted November 07, 2017 at 04:04AM by albinowax
via reddit http://ift.tt/2hc79Mx
http://ift.tt/2y69D61
Submitted November 07, 2017 at 04:04AM by albinowax
via reddit http://ift.tt/2hc79Mx
reddit
PoC||GTFO 0x16 [pdf] • r/netsec
4 points and 0 comments so far on reddit
PingCastle, a fast AD self-audit
http://ift.tt/2zinYjN
Submitted November 07, 2017 at 04:30AM by k3nnyfr
via reddit http://ift.tt/2hh71iA
http://ift.tt/2zinYjN
Submitted November 07, 2017 at 04:30AM by k3nnyfr
via reddit http://ift.tt/2hh71iA
PingCastle
Get Active Directory Security at 80% in 20% of the time - PingCastle
Because the Active Directory security lies in the process and not in expensive tools, our solution is simple: download PingCastle and apply its methodology.
Kerberoast Attack Techniques
http://ift.tt/2Agck5E
Submitted November 07, 2017 at 05:41AM by ju1i3k
via reddit http://ift.tt/2hNirb0
http://ift.tt/2Agck5E
Submitted November 07, 2017 at 05:41AM by ju1i3k
via reddit http://ift.tt/2hNirb0
Cobalt.io
Kerberoast Attack Techniques
In this blog we will focus on Kerberoast attack techniques (Old Technique and New Technique).
How to get my foot in the door? Masters in IT Security or Security certifications?
I'm a recent grad with a BS in Management Information Systems that is currently pursuing a security route but do not know where or how to start. I've been looking at masters programs as well as security certifications -- what's the best way to get my foot in the door? I'm a junior System Admin with experience in web dev etc. My question, 1. How do I get my foot in the door? 2. Is a masters a good idea? 3. What certifications should I study and take? 4. What type of jobs are hot in the market? 5. Your experience getting in the field.Thank you so much for reading and any comment is appreciated! Please give insight to this fellow newb - thanks.
Submitted November 07, 2017 at 10:32AM by bigpoppaash
via reddit http://ift.tt/2AfoiwD
I'm a recent grad with a BS in Management Information Systems that is currently pursuing a security route but do not know where or how to start. I've been looking at masters programs as well as security certifications -- what's the best way to get my foot in the door? I'm a junior System Admin with experience in web dev etc. My question, 1. How do I get my foot in the door? 2. Is a masters a good idea? 3. What certifications should I study and take? 4. What type of jobs are hot in the market? 5. Your experience getting in the field.Thank you so much for reading and any comment is appreciated! Please give insight to this fellow newb - thanks.
Submitted November 07, 2017 at 10:32AM by bigpoppaash
via reddit http://ift.tt/2AfoiwD
reddit
How to get my foot in the door? Masters in IT... • r/security
I'm a recent grad with a BS in Management Information Systems that is currently pursuing a security route but do not know where or how to start....
Fire Safety - Prevention, Protection & Extinction
http://ift.tt/2Aios6h
Submitted November 07, 2017 at 12:29PM by sdbworld
via reddit http://ift.tt/2hNHDhm
http://ift.tt/2Aios6h
Submitted November 07, 2017 at 12:29PM by sdbworld
via reddit http://ift.tt/2hNHDhm
SDB World
SDB World - Fire Safety - Prevention, Protection & Extinction
Fire Safety service intended to prevent the destruction caused by fire. It help to protect the people from the distractions.
Burp plugin to automatically fingerprint/evade web application firewalls using ML
http://ift.tt/2hKrWYA
Submitted November 07, 2017 at 01:38PM by pwnwaffe
via reddit http://ift.tt/2Af55Lk
http://ift.tt/2hKrWYA
Submitted November 07, 2017 at 01:38PM by pwnwaffe
via reddit http://ift.tt/2Af55Lk
Census-Labs
CENSUS | IT Security Works
This blog post serves as a followup to my summer B-Sides Athens 2017 talk ennoscriptd “Lightbulb framework – shedding light on the dark side of WAFs and Filters”.
Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later (2001)
http://ift.tt/1vcKY7T
Submitted November 07, 2017 at 03:58PM by loselasso
via reddit http://ift.tt/2lZIDnd
http://ift.tt/1vcKY7T
Submitted November 07, 2017 at 03:58PM by loselasso
via reddit http://ift.tt/2lZIDnd
reddit
Strange Attractors and TCP/IP Sequence Number Analysis... • r/netsec
1 points and 0 comments so far on reddit
Phishing catcher: catch phishing domains in real time with certstream
http://ift.tt/2Aq7MdW
Submitted November 07, 2017 at 05:01PM by actually_NOLAN
via reddit http://ift.tt/2ArvMh1
http://ift.tt/2Aq7MdW
Submitted November 07, 2017 at 05:01PM by actually_NOLAN
via reddit http://ift.tt/2ArvMh1
GitHub
x0rz/phishing_catcher
phishing_catcher - Phishing catcher using Certstream
Cybercriminals Infiltrating E-Mail Networks to Divert Large Customer Payments
http://ift.tt/2iBluT8
Submitted November 07, 2017 at 06:19PM by volci
via reddit http://ift.tt/2ApTn1w
http://ift.tt/2iBluT8
Submitted November 07, 2017 at 06:19PM by volci
via reddit http://ift.tt/2ApTn1w
reddit
Cybercriminals Infiltrating E-Mail Networks to Divert... • r/security
2 points and 0 comments so far on reddit
CyberConnect 2017 - YouTube
https://www.youtube.com/playlist?list=PLenh213llmcZYmMZYE_x5W-j2WWfo6N44
Submitted November 07, 2017 at 07:16PM by WinglessIndependence
via reddit http://ift.tt/2zpM63t
https://www.youtube.com/playlist?list=PLenh213llmcZYmMZYE_x5W-j2WWfo6N44
Submitted November 07, 2017 at 07:16PM by WinglessIndependence
via reddit http://ift.tt/2zpM63t
YouTube
CyberConnect 2017 - YouTube
Security In 5: Episode 106 - OWASP Top 10 - A4 - Insecure Direct Object References
http://ift.tt/2hiD9Th
Submitted November 07, 2017 at 07:41PM by BinaryBlog
via reddit http://ift.tt/2zjAijM
http://ift.tt/2hiD9Th
Submitted November 07, 2017 at 07:41PM by BinaryBlog
via reddit http://ift.tt/2zjAijM
Libsyn
Security In Five Podcast: Episode 106 - OWASP Top 10 - A4 - Insecure Direct Object References
We continue with the OWASP Top 10 series and next up is number 4, Insecure Direct Object References. This episode gives a high overview of this control, how attackers exploit it and how you can work to prevent this from happening in your applications. OWASP…